Overview

overview

10

Static

static

10

2352-97-0x...ry.exe

windows7-x64

2352-97-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2352-97-0x0000000000450000-0x0000000000480000-memory.dmp

  • Size

    192KB

  • MD5

    8d5e39318695977f3a187101b88e60ac

  • SHA1

    e0745a6e056afe8b87fb2f5831918edeec2f5b3c

  • SHA256

    b8ceedafcb4a1e2e8ddfec069172a424896d8bce00363694ac2cbb414bb0e3bc

  • SHA512

    22b1eded097c88bad6bcba06a9d4176db8e9ebec79c3030e872d279bf73a99f01d71c2905975080ed0bca9e5026a9747df39a752c83a327886371a278bb867c4

  • SSDEEP

    1536:EDrRuq1Ps36sv0W7TRVOQM6fwrHwhn/rQbg5fb25LxNcqYQHnbuxaNLQmpTu0Gkr:M8sO/O2DnEba0LxNEyPNcmpTu58e8hT

Score
10/10
kiraredline

Malware Config

Extracted

Family

redline

Botnet

kira

C2

77.91.68.48:19071

Attributes
  • auth_value

    1677a40fd8997eb89377e1681911e9c6

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2352-97-0x0000000000450000-0x0000000000480000-memory.dmp
    .exe windows x86


    Headers

    Sections